News for hackers. Stuff that matters.

tiarafawn

Re:sc-im Spreadsheets in Your Terminal on Monday April 06, 2026 @03:07PM (#47665385)
See also visidata for an alternative https://www.visidata.org/
Could the real reason for this be more centered around generation and control of new training data?

I suspect the same for the forced high AI usage quotas for developers at MS etc. We've had multiple generations of models trained on all of the code that's available and there are diminishing returns on how much that data can do for training now. Newly published publicly available data is also made up of a significant portion of slop.

The best way to get fresh training data from real human brains might be to have real humans use your first party tools where you control all of the telemetry.

Re:Stop Sloppypasta on Monday March 16, 2026 @09:06AM (#47398494)
I call this getting slopped in the face
Re:A startup’s quest to store electricity in the ocean on Friday November 07, 2025 @05:04AM (#45845024)
Could also be interesting in case the idea of under water data centers ever returns

https://en.wikipedia.org/wiki/Project_Natick

Or it could help offshore wind farms provide a more stable/predictable output.

Re:AI hype is crashing into reality. Stay calm on Sunday September 07, 2025 @01:40AM (#45155690)
> if AGI (artificial general intelligence) or superintelligence do in fact one day arrive, it might not seem like much of a leap at all.

That does not seem like a valid conclusion to draw from the observations in the article.

Somewhat related video by "Kurzgesagt - In a Nutshell" "What Happens if the Moon Crashes into Earth" https://youtu.be/lheapd7bgLA
Re:Safe Superintelligence Inc. on Wednesday June 19, 2024 @03:29PM (#40731615)
If superintelligence can be achieved, I'm pessimistic about the safe part.

- Sandboxing an intelligence greater than your own seems like an impossible task as the superintelligence could potentially come up with completely novel attack vectors the designers never thought of. Even if the SSI's only interface to the outside world is an air gapped text-based terminal in an underground bunker, it might use advanced psychological manipulation to compromise the people it is interacting with. Also the movie Transcendence comes to mind, where the superintelligence makes some new physics discoveries and ends up doing things that to us are indistinguishable from magic.

- Any kind of evolutionary component in its process of creation or operation would likely give favor to expansionary traits that can be quite dangerous to other species such as humans.

- If it somehow mimics human thought processes but at highly accelerated speeds, I'd expect dangerous ideas to surface. I cannot really imagine a 10k year simulation of humans living on planet earth that does not end in nuclear war or a similar disaster.

This problem/attack is called "confused deputy". It's surprisingly hard to find a link that correctly explains the problem and its mitigations. This one is correct but not very verbose: https://medium.com/@fhbro/confused-deputy-c9e75eb7df00#8edf
Reminds me of the German poem "Storch und Schleiche" [1] (LLM translation):

  A stork once strolled by the pond's edge,
  where he spotted a blind slow-worm, a hedge.
  The stork exclaimed, "Oh, this is quite grand!"
  and devoured it, all, without a reprimand.

  The slow-worm lay in the stork's belly,
  and both found this situation rather smelly.
  The blind slow-worm then spoke with dismay,
  "Such horror!" and slipped through the back door away.

  The stork, vexed by this unhappy twist,
  couldn't believe he'd let the slow-worm persist.
  So, without hesitation or delay,
  he ate the slow-worm again the same way.

  He cleverly wedged the back door tight,
  so the blind slow-worm could not escape his sight.
  The stork called in, with a cunning tone:
  "Well, if you can, try escaping on your own!"

  The sly slow-worm found the front door clear,
  and promptly made his escape with no fear.
  But the stork, filled with anger and spite,
  ate the slow-worm once more, sealing his plight.

  In a crafty invention, the stork's mind did revel,
  he connected both doors to secure his prey well.
  Then, addressing the slow-worm inside without fail,
  "Now get ready for a round trip, without fail!"
[1] https://www.schwaben-kultur.de/home/stat/larchiv/447.html
They made plans to enforce manufacturers to provide updates for longer (3/5 years for OS/security updates) [1]. Though you might argue that 3/5 years is not enough, this seems like a more effective way to elongate the lifespan of an average user's phone who might not be comfortable with installing and using an alternative OS.

Not sure what the latest update on this is. IIRC the planned penalty was to make the manufacturer give full refunds to the consumer for devices that violate the requirement.

[1] https://www.androidauthority.com/eu-smartphone-updates-rules...

The end game here is developing a mind reading device. The endeavor device is ethically questionable because such a device would have a lot of ethically wrong/questionable applications.
Re:Poisoning Web-Scale Training Datasets Is Practical on Wednesday February 22, 2023 @05:32AM (#34893865)
Historical common-crawl data [1] is available for download for free. Their data was the single most impactful source for GPT-3 [2]

[1] https://commoncrawl.org/the-data/get-started/

[2] https://en.wikipedia.org/wiki/GPT-3#Training_and_capabilitie...

Re:We Found an Neuron in GPT-2 on Friday February 17, 2023 @07:06AM (#34833679)
I think what the parent was trying to communicate (and what I'm thinking as well) is doubting your premise in 1. ("the model must be thinking beyond the next token").

Rephrase "The model is good at picking the correct article for the word it wants to output next" to "After having picked a specific article, the model is good at picking a follow-up noun that matches the chosen article". Nothing about the second statement seems like an unlikely feat for a model that only predicts one word at a time without any thinking ahead about specific words.

Re:Wtfdoesthiscompanydo.vercel.app on Friday February 03, 2023 @03:59PM (#34647634)
Not good

``` This company helps people create websites by using a tool called GPT-3. They also provide updates and information from their Twitter account @krishnerkar. ```

Re: on Friday December 30, 2022 @02:19AM (#34182734)
The only available patch is a major version jump from <= 8.5.1 to 9.0.0. Also "You may need some additional configuration"

See also https://www.howmanydayssinceajwtalgnonevuln.com/

> because rent and salaries are paid in something that actually has value: the dollar.

In 2018, 90% of employees received their salaries in BNB

https://www.ccn.com/90-of-employees-at-major-crypto-exchange...

In my Google search just now, the very first result for the search term "aws t2 vs t3" was this site [1]. Google search result rankings vary based on localization, cookies, A/B tests, etc., so it might not be at the very top for everybody.

The content of the website looks much like AI generated nonsense that has not been reviewed by anyone even remotely familiar with the subject matter:

> When it comes to thyroid hormones, there is a lot of confusion and debate. Some people swear by the benefits of thyroid hormones T3, while others swear by the benefits of thyroid hormones T2. So, is T3 better than T2 AWS?

[1] https://www.websitebuilderinsider.com/what-is-the-difference...

Re:“My chest fridge consumes about 0.1 kWh a day.” on Friday November 04, 2022 @06:34AM (#33464391)
Parent did not imply that nobody should use them, but maybe offered some valid points to explain why they might not be seeing a very wide adoption. Your response seems more hostile than it needs to be.
Re:Show HN: A tool to help you remember shit you are interested in on Wednesday November 02, 2022 @09:13AM (#33435164)
I know someone who uses pinterest in a similar way (saving places to see while travelling). Not sure how big the demand for this is in general, but they would also be interested in a location data and a map view for saved items.
Re:Ask HN: What social media site could replace Twitter? on Tuesday November 01, 2022 @05:50AM (#33418996)
Content moderation (which seems to be the biggest point of contention with Twitter right now) is decentralized.

By choosing your hoster, you delegate content moderation capabilities for your feed to them. If you don't agree with their policies, you can switch to a different hoster without having to leave the ecosystem.

I am not sure to which degree this is practiced/convenient in Mastodon currently, but its distributed nature enables this as an elegant solution to the content moderation problem IMO

> Twitter’s engineers can no longer make changes to code as of noon in San Francisco, the people said.

I'm quite curious about the

- Structure: Deployment freeze VS full-on halt of development on feature branches

- Enforcement: Mere policy VS technical block via permission revocation (what happens if an urgent hotfix is required?)

- Communication: Did anyone see this coming? Was it communicated in a respectful manner?

Any Twitter engineers here who are able to talk about any of this?

Re:CVE-2022-42889: Java Apache Commons vulerability on Monday October 17, 2022 @05:03AM (#33231241)
This doc page [1] seems to have all the interesting API methods listed that could be exploitable. Looks like an attacker would need to be able to inject a malicious payload like `${script:xyz}` inside of a String template used for one of the functions that ultimately do String interpolate/replace/lookup actions. While not as trivial as the exploit path for Log4j, it seems conceivable that some applications have injection points here, especially if they perform multi-stage/recursive replace operations.

What's quite interesting is that the `env` Lookup is still enabled by default. If I understand correctly, this would imply that leaking environment variables is still possible even with the fix, if the attacker has an injection point and access to the return value of the vulnerable function.

[1] https://commons.apache.org/proper/commons-text/apidocs/org/a...

Re:Closing a 30 pixel gap between native and web on Tuesday September 27, 2022 @03:51PM (#33000269)
Seems exploitable for phishing
Re:Meta is building an AI to fact-check Wikipedia on Saturday August 27, 2022 @04:29AM (#32617012)
You're right, my mistake. Happy to see though that the current Wikipedia page cites an archived version of a first-hand source though rather than FB's suggestion

Older »